mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-08 10:12:53 +01:00
disable steno in so-status for import node
This commit is contained in:
@@ -135,16 +135,17 @@ append_so-steno_so-status.conf:
|
||||
- text: so-steno
|
||||
- unless: grep -q so-steno /opt/so/conf/so-status/so-status.conf
|
||||
|
||||
{% if STENOOPTIONS.status == 'running' %}
|
||||
delete_so-steno_so-status.disabled:
|
||||
file.uncomment:
|
||||
- name: /opt/so/conf/so-status/so-status.conf
|
||||
- regex: ^so-steno$
|
||||
{% elif STENOOPTIONS.status == 'stopped' %}
|
||||
|
||||
{% if not STENOOPTIONS.start %}
|
||||
so-steno_so-status.disabled:
|
||||
file.comment:
|
||||
- name: /opt/so/conf/so-status/so-status.conf
|
||||
- regex: ^so-steno$
|
||||
{% else %}
|
||||
delete_so-steno_so-status.disabled:
|
||||
file.uncomment:
|
||||
- name: /opt/so/conf/so-status/so-status.conf
|
||||
- regex: ^so-steno$
|
||||
{% endif %}
|
||||
|
||||
{% else %}
|
||||
|
||||
@@ -1941,12 +1941,6 @@ sensor_pillar() {
|
||||
if [ "$HNSENSOR" != 'inherit' ]; then
|
||||
echo " hnsensor: $HNSENSOR" >> "$pillar_file"
|
||||
fi
|
||||
if [[ $is_import ]]; then
|
||||
printf '%s\n'\
|
||||
"steno:"\
|
||||
" enabled: false" >> "$pillar_file"
|
||||
fi
|
||||
|
||||
}
|
||||
|
||||
set_default_log_size() {
|
||||
|
||||
Reference in New Issue
Block a user